- op: replace
  path: /spec/jobTemplate/spec/template/spec/containers/0/env
  value:
    - name: QL3_PLUGIN_PACKAGE_EXECUTOR_ENABLED
      value: 'true'
    - name: QL3_PLUGIN_PACKAGE_EXECUTOR_OWNER
      value: cluster_package_executor
    - name: QL3_PLUGIN_PACKAGE_EXECUTOR_APPROVAL_BATCH_SIZE
      value: '8'
    - name: QL3_PLUGIN_PACKAGE_EXECUTOR_DISPATCH_BATCH_SIZE
      value: '8'
    - name: QL3_PLUGIN_PACKAGE_EXECUTOR_MAX_BATCHES
      value: '4'
    - name: QL3_PLUGIN_PACKAGE_EXECUTOR_LEASE_DURATION_MS
      value: '600000'
    - name: QL3_PLUGIN_PACKAGE_EXECUTOR_REVOCATION_PAGE_SIZE
      value: '16'
    - name: QL3_PLUGIN_PACKAGE_EXECUTOR_REVOCATION_MAX_PAGES
      value: '16'
    - name: QL3_PLUGIN_PACKAGE_SECRET_ACTION_CONTROLLER_ENABLED
      value: 'true'
    - name: QL3_PLUGIN_PACKAGE_SECRET_ACTION_CONTROLLER_LIMIT
      value: '8'
    - name: QL3_PLUGIN_PACKAGE_SECRET_ACTION_NAMESPACE
      value: qinglong3-system
    - name: QL3_PLUGIN_PACKAGE_SECRET_ACTION_SERVICE_ACCOUNT
      valueFrom:
        configMapKeyRef:
          name: ql3-plugin-package-secret-action-admission
          key: serviceAccountName
    - name: QL3_PLUGIN_PACKAGE_SECRET_ACTION_SOURCE_SECRET
      valueFrom:
        configMapKeyRef:
          name: ql3-plugin-package-secret-action-admission
          key: sourceSecretName
    - name: QL3_PLUGIN_PACKAGE_SECRET_ACTION_IMAGE
      valueFrom:
        configMapKeyRef:
          name: ql3-plugin-package-secret-action-admission
          key: image
    - name: QL3_PLUGIN_PACKAGE_SECRET_ACTION_POSTGRES_CA_SECRET
      valueFrom:
        configMapKeyRef:
          name: ql3-plugin-package-secret-action-admission
          key: postgresCaSecretName
    - name: QL3_PLUGIN_PACKAGE_SECRET_ACTION_POSTGRES_CA_KEY
      valueFrom:
        configMapKeyRef:
          name: ql3-plugin-package-secret-action-admission
          key: postgresCaKey
    - name: QL3_PLUGIN_PACKAGE_SECRET_ACTION_POSTGRES_SERVERNAME
      valueFrom:
        configMapKeyRef:
          name: ql3-plugin-package-secret-action-admission
          key: postgresServerName
    - name: QL3_PLUGIN_PACKAGE_SECRET_ACTION_POSTGRES_URL_SECRET
      valueFrom:
        configMapKeyRef:
          name: ql3-plugin-package-secret-action-admission
          key: postgresUrlSecretName
    - name: QL3_PLUGIN_PACKAGE_SECRET_ACTION_POSTGRES_URL_KEY
      valueFrom:
        configMapKeyRef:
          name: ql3-plugin-package-secret-action-admission
          key: postgresUrlSecretKey
    - name: QL3_PLUGIN_PACKAGE_SECRET_ACTION_POSTGRES_AUTH_SECRET
      valueFrom:
        configMapKeyRef:
          name: ql3-plugin-package-secret-action-admission
          key: postgresAuthSecretName
    - name: QL3_PLUGIN_PACKAGE_SECRET_ACTION_POSTGRES_HOST
      valueFrom:
        configMapKeyRef:
          name: ql3-plugin-package-secret-action-admission
          key: postgresHost
    - name: QL3_PLUGIN_PACKAGE_SECRET_ACTION_POSTGRES_PORT
      valueFrom:
        configMapKeyRef:
          name: ql3-plugin-package-secret-action-admission
          key: postgresPort
    - name: QL3_PLUGIN_PACKAGE_SECRET_ACTION_POSTGRES_DATABASE
      valueFrom:
        configMapKeyRef:
          name: ql3-plugin-package-secret-action-admission
          key: postgresDatabase
    - name: QL3_PLUGIN_PACKAGE_SECRET_ACTION_POSTGRES_USERNAME_KEY
      valueFrom:
        configMapKeyRef:
          name: ql3-plugin-package-secret-action-admission
          key: postgresUsernameKey
    - name: QL3_PLUGIN_PACKAGE_SECRET_ACTION_POSTGRES_PASSWORD_KEY
      valueFrom:
        configMapKeyRef:
          name: ql3-plugin-package-secret-action-admission
          key: postgresPasswordKey
    - name: QL3_POSTGRES_TLS_MODE
      value: verify-full
    - name: QL3_POSTGRES_TLS_CA_FILE
      value: /var/run/secrets/qinglong3/postgres-package-executor/ca.crt
    - name: QL3_POSTGRES_APPLICATION_NAME
      value: qinglong3-plugin-package-executor
    - name: QL3_POSTGRES_MAX_CONNECTIONS
      value: '2'
    - name: QL3_POSTGRES_PACKAGE_EXECUTOR_HOST
      value: ql3-postgres-rw.qinglong3-system.svc
    - name: QL3_POSTGRES_PACKAGE_EXECUTOR_PORT
      value: '5432'
    - name: QL3_POSTGRES_PACKAGE_EXECUTOR_DATABASE
      value: qinglong
    - name: QL3_POSTGRES_PACKAGE_EXECUTOR_USER
      valueFrom:
        secretKeyRef:
          name: ql3-postgres-package-executor-auth
          key: username
    - name: QL3_POSTGRES_PACKAGE_EXECUTOR_PASSWORD
      valueFrom:
        secretKeyRef:
          name: ql3-postgres-package-executor-auth
          key: password
    - name: QL3_POSTGRES_TLS_SERVERNAME
      value: ql3-postgres-rw.qinglong3-system.svc
- op: replace
  path: /spec/jobTemplate/spec/template/spec/volumes/1/secret/secretName
  value: ql3-postgres-ca
- op: replace
  path: /spec/jobTemplate/spec/template/spec/volumes/1/secret/items/0/key
  value: ca.crt